diff --git a/CHANGELOG.md b/CHANGELOG.md
index 21d2c81..2311765 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,13 @@
+## [1.0.9](https://github.com/WYRE-AI/node-atera/compare/v1.0.8...v1.0.9) (2026-09-04)
+
+
+### Bug Fixes
+
+* **release:** add contents:read to the App token for gh pr create ([#80](https://github.com/WYRE-AI/node-atera/issues/80)) ([d4029f2](https://github.com/WYRE-AI/node-atera/commit/d4029f2d9b7e555a43db63c9843d0da414ba8582)), closes [WYRE-AI/node-crewhu#46](https://github.com/WYRE-AI/node-crewhu/issues/46)
+* **release:** restore persist-credentials:false, re-auth only for release ops ([#81](https://github.com/WYRE-AI/node-atera/issues/81)) ([92e2211](https://github.com/WYRE-AI/node-atera/commit/92e22111aa473a5dc2a9910b209799631e74ddf4))
+* **security:** resolve dependabot alerts via npm audit fix ([#77](https://github.com/WYRE-AI/node-atera/issues/77)) ([635ddd9](https://github.com/WYRE-AI/node-atera/commit/635ddd942bfd58ca0a7e69d520849c3fb60897d5))
+
+
 ## [1.0.8](https://github.com/WYRE-AI/node-atera/compare/v1.0.7...v1.0.8) (2026-08-25)
 
 
diff --git a/package-lock.json b/package-lock.json
index 45bbe3e..c8d2fff 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@wyre-ai/node-atera",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@wyre-ai/node-atera",
-      "version": "1.0.8",
+      "version": "1.0.9",
       "license": "Apache-2.0",
       "devDependencies": {
         "@eslint/js": "^10.0.1",
diff --git a/package.json b/package.json
index e3b03ea..3015a3e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@wyre-ai/node-atera",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "description": "Comprehensive, fully-typed Node.js/TypeScript library for the Atera REST API v3",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",